This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft File: epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft (raw, json) Hash identifier: IPlb3XZXnvQukTw5ruttcP2tvOrX+ZWZzOUiUPDTIMA= Subject key identifier: CC:0A:95:2B:A1:73:E3:E1:85:E9:05:08:34:86:BA:1D:1B:1D:D6:7F Authority key identifier: 7A:93:8A:93:5F:8B:AF:9C:D9:33:90:64:16:59:0D:78:2E:72:87:C7 Certificate issuer: /CN=7a938a935f8baf9cd933906416590d782e7287c7 Certificate serial: 019AE78552A6FB0A7BFF55CEE16572C14421 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft Manifest number: 175B Signing time: Thu 04 Dec 2025 04:01:05 +0000 Manifest this update: Thu 04 Dec 2025 04:01:05 +0000 Manifest next update: Fri 05 Dec 2025 04:01:05 +0000 Files and hashes: 1: 8ZJIQFfkXuRXaMfNIj1AaOQgmmY.roa (hash: fkS7EU1BD9C9b8dqx8W2IP5DewkFREbnFMqYxIgMiJw=) 2: Dw9LWwQEkFlvEEtQubiLXetc3pc.roa (hash: jU2F3DfrdPn0GZZk1xUCaPCNuSats7670fToq4AErzE=) 3: SBxAIWFNuQGrCTAH53EhdnL2yps.roa (hash: iy20UXGCUBS93Bj86SsCQ9ZfK3kFCwdnihkcjNjnF+o=) 4: epOKk1-Lr5zZM5BkFlkNeC5yh8c.crl (hash: qJNBociczuASHKAFGLj7mA6TIBH23YrG1D2JnCJMD1o=) 5: jHpbkP7Y7SL4FQAQOS01aN05aWw.roa (hash: jBc6Yfacl3zknfr5K+ara9iVbORR1iTOe0kex0C2UTY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.crl rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 04:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e7:85:52:a6:fb:0a:7b:ff:55:ce:e1:65:72:c1:44:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a938a935f8baf9cd933906416590d782e7287c7 Validity Not Before: Dec 4 04:01:05 2025 GMT Not After : Dec 5 04:01:05 2025 GMT Subject: CN=cc0a952ba173e3e185e905083486ba1d1b1dd67f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:40:96:52:01:c0:0f:42:fa:6e:04:85:9e:03: d1:88:1d:b2:cb:3e:2a:f5:ad:e2:f4:6a:8c:2a:0c: 52:aa:1e:ad:02:85:6d:90:22:5f:d9:2d:1b:3f:12: 9a:1a:0b:10:88:60:0d:7d:1f:27:96:15:96:4a:e0: a9:4f:ce:b9:8d:a1:46:89:76:29:2e:83:d0:f8:5d: 4d:01:ab:3b:70:a5:98:9c:e5:ed:ad:49:a6:48:2a: 77:2e:f9:55:a9:d8:0e:d3:74:0a:d5:47:a8:42:30: 64:a4:f2:f5:b5:26:46:7e:44:13:a6:b7:8e:2d:8b: 98:83:c1:e7:25:93:9e:b8:36:a8:e1:cb:87:ab:51: 53:ef:5d:73:aa:2c:0e:3d:c5:0f:17:74:68:ae:7e: e9:f6:ce:10:a0:29:c7:d6:4c:e7:2a:22:bd:4c:55: a7:a0:ef:eb:0b:a3:63:e2:e4:1c:a1:8f:86:34:6b: 88:3f:9f:78:39:fa:58:ad:b1:47:95:99:85:b7:ae: 77:0e:8f:9c:6f:6c:49:57:b4:aa:f4:22:c6:8e:64: 75:74:08:d6:8d:1c:c8:2b:d5:69:e0:5f:f2:66:05: 67:3d:91:9a:38:45:d3:9d:45:c5:08:4a:41:04:6e: d1:b7:75:71:e2:70:5d:36:ed:9b:f5:14:fe:49:97: 06:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:0A:95:2B:A1:73:E3:E1:85:E9:05:08:34:86:BA:1D:1B:1D:D6:7F X509v3 Authority Key Identifier: keyid:7A:93:8A:93:5F:8B:AF:9C:D9:33:90:64:16:59:0D:78:2E:72:87:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:3d:9d:e3:f0:87:c0:ff:e0:db:9a:d4:cf:db:61:4c:33:1c: 8d:20:c4:6a:e0:b7:2a:84:31:34:bf:ab:7b:45:0e:f3:a2:76: 79:2f:d2:cd:6e:c1:67:9d:d4:08:da:1b:d7:97:6a:58:49:6b: ef:9d:87:df:bb:ee:28:35:93:bf:d7:a4:ee:11:0b:96:90:cc: 63:3f:7e:0c:79:3b:9a:be:d9:9a:79:10:de:4d:cc:59:e2:2c: 30:b9:00:6b:7e:b8:13:a5:c9:69:ed:c7:ea:05:19:1f:e2:fc: 67:36:36:43:b2:89:08:95:57:02:3b:17:73:f8:9f:a5:da:0e: 55:77:ad:07:99:38:67:37:33:19:a8:1a:d0:86:dc:60:f6:2b: 5f:c9:9c:c3:98:09:bb:3b:f9:65:8f:13:d1:d9:aa:03:9c:91: 5f:24:1c:55:e6:aa:6e:45:a4:85:3c:f3:27:09:8d:12:0c:13: 97:b0:7b:c3:ed:f3:cf:79:8d:4f:d2:f3:7c:a8:a3:9e:99:6b: ea:91:83:a0:45:d4:8f:6b:e1:ff:89:cd:a1:06:5c:12:6b:f8: 1a:0b:98:c7:48:37:85:48:9b:00:b7:99:fc:09:31:43:ee:a5: 73:30:44:15:b0:20:05:9d:e3:8f:d2:9c:b4:92:38:9f:b0:06: fe:aa:77:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrnhVKm+wp7/1XO4WVywUQhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhOTM4YTkzNWY4YmFmOWNkOTMzOTA2NDE2NTkwZDc4MmU3 Mjg3YzcwHhcNMjUxMjA0MDQwMTA1WhcNMjUxMjA1MDQwMTA1WjAzMTEwLwYDVQQD EyhjYzBhOTUyYmExNzNlM2UxODVlOTA1MDgzNDg2YmExZDFiMWRkNjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UCWUgHAD0L6bgSFngPRiB2yyz4q 9a3i9GqMKgxSqh6tAoVtkCJf2S0bPxKaGgsQiGANfR8nlhWWSuCpT865jaFGiXYp LoPQ+F1NAas7cKWYnOXtrUmmSCp3LvlVqdgO03QK1UeoQjBkpPL1tSZGfkQTpreO LYuYg8HnJZOeuDao4cuHq1FT711zqiwOPcUPF3Rorn7p9s4QoCnH1kznKiK9TFWn oO/rC6Nj4uQcoY+GNGuIP594OfpYrbFHlZmFt653Do+cb2xJV7Sq9CLGjmR1dAjW jRzIK9Vp4F/yZgVnPZGaOEXTnUXFCEpBBG7Rt3Vx4nBdNu2b9RT+SZcGCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMwKlSuhc+PhhekFCDSGuh0bHdZ/MB8GA1UdIwQY MBaAFHqTipNfi6+c2TOQZBZZDXgucofHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXBPS2sxLUxyNXpaTTVCa0Zsa05lQzV5aDhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9mZjBiZmMtMjZmZS00NDEyLWEyMzIt MzE5OTlmM2FkZDM2LzEvZXBPS2sxLUxyNXpaTTVCa0Zsa05lQzV5aDhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9mZjBiZmMtMjZmZS00NDEyLWEyMzItMzE5OTlmM2FkZDM2 LzEvZXBPS2sxLUxyNXpaTTVCa0Zsa05lQzV5aDhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALz2d4/CH wP/g25rUz9thTDMcjSDEauC3KoQxNL+re0UO86J2eS/SzW7BZ53UCNob15dqWElr 752H37vuKDWTv9ek7hELlpDMYz9+DHk7mr7ZmnkQ3k3MWeIsMLkAa364E6XJae3H 6gUZH+L8ZzY2Q7KJCJVXAjsXc/ifpdoOVXetB5k4ZzczGaga0IbcYPYrX8mcw5gJ uzv5ZY8T0dmqA5yRXyQcVeaqbkWkhTzzJwmNEgwTl7B7w+3zz3mNT9LzfKijnplr 6pGDoEXUj2vh/4nNoQZcEmv4GguYx0g3hUibALeZ/AkxQ+6lczBEFbAgBZ3jj9Kc tJI4n7AG/qp3Ng== -----END CERTIFICATE-----Generated at Thu Dec 4 11:24:00 2025 by rpki-client